Privacy Information

How the Practice handles your information

Purpose of providing this privacy information

This privacy notice tells you what to expect when you, and sometimes others, provide your personal information to us.  It sets out what information we collect about you and why we collect it, how the information may be used, who it may be shared with and how we will protect it and keep it confidential.

The notice explains what rights you have to control how we use your information, our legal basis for processing it and how you can access it. We also explain who to contact if you have any questions and how to contact them.

Hirwaun Medical Centre is the Data Controller for the personal information we process, unless otherwise stated. There are many ways you can contact the Practice, including by phone, email, and post. Further details can be found on our Practice Details webpage.

Medical Reports

We use a processor, iGPR Technologies Limited (“iGPR”), to assist us with responding to report requests relating to your patient data, such as subject access requests that you submit to us (or that someone acting on your behalf submits to us) and report requests that insurers submit to us under the Access to Medical Records Act 1988 in relation to a life insurance policy that you hold or that you are applying for.
iGPR manages the reporting process for us by reviewing and responding to requests in accordance with our instructions and all applicable laws, including UK data protection laws. The instructions we issue to iGPR include general instructions on responding to requests and specific instructions on issues that will require further
consultation with the GP responsible for your care.

Complaints

If you have concerns or queries about how we process your personal information, please contact the Practice direct or our Data Protection Officer in the first instance.

Practice Information Governance Leads

Practice Manager : Mrs G Hughes

Lead GP : Dr A. W. Erhardt

Data Protection Officer

Under UK Data Protection legislation, the Practice is required to appoint a Data Protection Officer (DPO). This role is essential in facilitating the Practice accountability and compliance with data protection requirements.

The Practice DPO is:

Data Protection Office Support Services (DHCW Wales)

DHCWGMPDPO@wales.nhs.uk